US govt says agencies hit by massive cyberattack

The US government issued an emergency directive to federal agencies in the wake of a major cyberattack, as multiple media outlets reported at least two departments -- including the Treasury -- had been targeted by hackers with ties to Russia.

In a statement on Sunday, the Cybersecurity and Infrastructure Security Agency (CISA) said it had ordered federal agencies to immediately stop using SolarWinds Orion IT products following reports that hackers had used a recent update to gain access to internal communications.

"The compromise of SolarWinds’ Orion Network Management Products poses unacceptable risks to the security of federal networks," said CISA Acting Director Brandon Wales. "Tonight’s directive is intended to mitigate potential compromises within federal civilian networks... we urge all our partners-in the public and private sectors-to assess their exposure to this compromise and to secure their networks," he added.

The US government earlier Sunday admitted its computer networks had been hit by a cyberattack. "We have been working closely with our agency partners regarding recently discovered activity on government networks," a spokesperson for the Cybersecurity and Infrastructure Security Agency told AFP.

"CISA is providing technical assistance to affected entities as they work to identify and mitigate any potential compromises." IT company SolarWinds over the weekend admitted that hackers had exploited a backdoor in an update of some of its software released between March and June.

"We have been advised this attack was likely conducted by an outside nation state and intended to be a narrow, extremely targeted, and manually executed attack, as opposed to a broad, system-wide attack," the firm said on its website. The hacks are part of a wider campaign that also hit major cybersecurity firm FireEye, which said its own defenses had been breached by sophisticated attackers who stole tools used to test customers’ computer systems.